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RELIABILITY ANALYSIS APPLIED TO STRUCTURAL TESTS 

By Patricia Diamond and A. O. Payne 
Aeronautical Research Laboratories 
Department of Supply 
Commonwealth of Australia 

SUMMARY 


Although full-scale fatigue testing is now widely adopted in modern aircraft 
design practice, the current fatigue-life assessment procedures do not utilise all of 
the test data that is obtained, and they only partly take account of the probability of 
failure of the structure during the period in which it is being progressively weakened 
by the fatigue crack. 

The present paper is concerned with the application of reliability theory to pre- 
dict, from structural fatigue test data, the risk of failure of a structure under service 
conditions because its load-carrying capability is progressively reduced by the exten- 
sion of a fatigue crack. 

The procedure is applicable to both safe-life and fail-safe structures and, for a 
prescribed safety level, it will enable an inspection procedure to be planned or, if 
inspection is not feasible, it will evaluate the life to replacement. 

The theory has been further developed to cope with the case of structures with 
initial cracks, such as can occur in modern high-strength materials which are suscep- 
tible to the formation of small flaws during the production process. 

The method has been applied to a structure of high-strength steel and the results 
are compared with those obtained by the current life estimation procedures. This has 
shown that the conventional methods can be unconservative in certain cases, depending 
on the characteristics of the structure and the design operating conditions. 

The suitability of the probabilistic approach to the interpretation of the results 
from full-scale fatigue testing of aircraft structures is discussed and the assumptions 
involved are examined. 


INTRODUCTION 


8 


In recent years the development of high-performance aircraft using new high- 
strength materials and more refined methods of stress analysis to satisfy the ultimate 
strength requirement has led to the fatigue performance of aircraft structures becoming 
a progressively more important factor. 
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Basic studies of the fatigue behaviour of complete structures, such as those 
described in references 1 and 2, have shown that a full-scale fatigue test of the structure 
under representative loading conditions is essential to identify the fatigue critical areas 
and accurately represent the complex stress conditions under fatigue loading. 

Although full-scale fatigue testing is now widely adopted in aircraft design practice, 
this usually consists of applying to a single test specimen a loading sequence representing 
the service load history. 

Complete failure under the test load sequence or the appearance of a crack of a 
particular length is defined as failure and the results are applied to determine a life under 
the service loading conditions. 

However, such an arbitrary criterion of failure does not consider the increasing 
risk of static failure to which the structure is subjected as it is progressively weakened 
by the growing fatigue crack. The actual risk of failure could therefore differ consider- 
ably from that obtained by the currently used methods of life estimation. 

Furthermore the difficulty of detecting very small cracks with current techniques, 
together with the susceptibility of the modern high-strength materials to the formation of 
flaws in production, may result in some probability of cracks existing in airframes prior 
to entering service. 

This paper is concerned with applying reliability analysis to calculate the probability 
of survival as a function of life from the results of the full-scale fatigue test, including the 
case of structures which may be initially cracked. 

NOMENCLATURE 


Footnotes for the nomenclature are found at the end of the list. 

a crack length (this may refer to crack length at surface, crack depth, or 

some other specified dimension of crack front) 

ap crack length for complete collapse under mean load (or crack length at 

which slope of crack propagation curve becomes infinite) 

a 0 length of the largest crack that will not be detected during production 

process 

aj) length of largest crack that will not be detected during in-service 

inspections 
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length of initial crack in any structure which is cracked at beginning of 
its service life 


t F t (ti) 

h 


i 


l Q ,Wc 


^N’^n 

L(n) 


probability of variate t exceeding some particular value ti 

period of operation (or service life) to extend a crack to length l in 
structure which contained initial crack of length l c , ty = nj - n c 

relative crack length a/ap {l is dimensionless and has same value 
whether "a" refers to crack length at surface or to crack depth) 

relative crack lengths corresponding to ao, a D , a c , respectively 

median values of distributions of l at life N and relative life n 

probability of survival to life n (also called the survivorship function) 


LF(n),L s (n), survivorship functions at relative life n, corresponding to risk func 
Li(n),L I *(n), tions, r F (n), r s (n), r x (n), r r *(n), r sL (n), and r s/jt (n), 

LsI»,L s ,M (n) respectively 

L g (h) survivorship function at relative service life h corresponding to risk 

function r s (h) for structures with initial crack 

N life of structure expressed as number of load applications or hours of 

operation 

life to first formation of fatigue crack (also called life to inital failure) 

H service life of structure which was initially cracked expressed as num- 

ber of load applications or hours of operation 

h relative service life of structure which was initially cracked, H/Nj 

N life to produce crack length l in any structure 

median of the distribution of Ni 

n relative life, N/Ni 


277 



H 


n l, z 


np 

n O’ n D> n c 

n s 

n l 

n I(l) ,n I(2)’ n I(m) 


P R’ M R 


t P x ( x D 

tp x( x l) 

P(N) 

m 

r(N) 

r(n) 

r(h) 


relative life to crack length l for any structure 

life of structure which has life z times median life at same crack 
length l 

relative life to complete collapse of structure under mean load 

relative lives to produce crack lengths of l Q , l D , and l c , respectively 

medians of distributions of nj, n F , n D , and n c , respectively 

relative life corresponding to particular life N s 

estimated mean fatigue life obtained from structural fatigue test 

relative lives to 1st, 2d, and mth inspections carried out to detect 
fatigue cracks 

probability density function of residual strength R with mean 
value /i R 

probability density function of variate x at particular value xi 

probability distribution of variate x at particular value xj, 

P x( x l) = Pr ( x = x l} 

probability of failure up to life N 

static strength of structure containing fatigue crack of relative length l 

probability of failure in remaining fleet at Nth load application or risk 
of failure at life N 

risk of failure at relative life n for unit change in z 

risk of failure after period of operation h in population of structures 
which contain initial cracks for unit change in z 
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r(h s | lo) 
r(hs | P(*c)) 

r s( n s) 

r S,jl( n s) 

r F( n s) 

r FT( n s) 

r sl» 

^ r l( n s‘>^D> n l) 

^ r I*( n s>^D> n l) 
^ r I ( n s»^D> n s) 


risk of failure after a period of operation h s in population of struc- 
tures all of which contain initial crack of length l Q 

risk of failure after period of operation h s in population of structures 
all of which contain initial cracks with probability distribution of 
initial crack lengths given by p(£ c ) 

risk of static fracture due to fatigue at particular life n s , defined as 
failure at life n s from fatigue crack in structure which is still able 
to sustain applied service load exceeding mean load 

risk of static fracture due to fatigue at life n s , assuming no variability 
in residual static strength of structures all containing cracks of given 
length 

risk of fatigue fracture at life n s , defined as failure at life n s due to 
fatigue crack reaching such extent that structure is unable to sustain 

mean load 

the total risk of fatigue failure at life n s , r FT (n s ) = r s (n s ) + r F (n s ) 


risk of failure at life n as calculated by conventional safe-life 
procedure 

risk of fatigue failure at life n s in population of structures which have 
all been previously inspected at life nj with inspection procedure 
which detects crack lengths greater than 

risk of fatigue failure at life n s when cracks of length exceeding 

are detected by inspection at n x and are then repaired and structures 

returned to service 

risk of fatigue failure at life n s with continuous inspection procedure 
by which cracks with length exceeding i D are detected and are then 
repaired and structures returned to service 
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f r r *(h s | p(Z c );i D ,h s ) 


( n s^D> r max) 


f 


r I*( h s | P(^c)j^D> r max) 


f 


r D ( n I(m)^D> n I(m-l)) 


risk of fatigue failure after period of operation h s in 
population of structures all initially cracked with dis- 
tribution of initial crack lengths given by p(Z c ) and 
continuously inspected to detect crack lengths 
exceeding Zp; after cracks are detected they are 
repaired and structures returned to service 

risk of fatigue failure at life n s with inspection proce- 
dure detecting crack lengths greater than Zp> at 
inspection intervals designed to limit risk below some 
specified value r max ; after cracks are detected they 
are repaired and structures returned to service 

risk of fatigue failure after period of operation h s in 
population of structures all initially cracked with dis- 
tribution of initial crack lengths given by p(Z c ) and 
inspected to detect crack lengths exceeding Zp> at 
inspection intervals designed to limit risk below some 
specified value r max ; after cracks are detected they 
are repaired and structures returned to service 

probability of detecting cracks by inspection at life 
n I(m) population of structures previously 
inspected at nj( m _jj with an inspection procedure 
detecting crack lengths exceeding Z £>; after cracks 
are detected they are repaired and structures 
returned to service 


^ r D*( h I(m) J P(Jc);*D> h I(m-l)) probability of detecting cracks by inspection after period 

of operation hj( m ) in population of structures all 
initially cracked with distribution of initial crack 
lengths given by p(Z c ) and previously inspected at 
^l(m-l) to detect crack lengths exceeding Z£>; after 
cracks are detected they are repaired and structures 
returned to service 


S applied service load 

Syjj. ultimate design load 
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mean load on structure 


U gust velocity 

Y relative service load, S/Syit 

t general symbols for mean and variance of population; used with suffix 

to denote variate 


M 0 

MrW 

In 

MrW 

Mo 


MD 


z 


mean strength (failing load) of uncracked structures 

mean strength of structures containing cracks of length l 

median crack propagation curve for population of structures, f n = g(n^) 


mean residual strength expressed nondimensionally as function of crack 

length l, • = <P(l) 

v-o 


relative strength of any structure containing crack length l, 

*o)-a& 

MrU) 


comparative life or life factor of structure with life 
of z times median life to same crack length, z 


to crack length 

N f,z H, z 

= -tt— or 

N i H 


l 


t Where no confusion can arise subscript for variate may be omitted, 
f Actual dimension of detectable crack aj) may be specified instead of relative 
crack length 
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INTERPRETATION OF FATIGUE TEST RESULTS 


With the present practice of fatigue certification by full-scale testing, the data pro- 
vided by the test specimen representing the median structure of the population includes 

(1) Location of the fatigue critical areas 

(2) The median crack propagation curve 

(3) The life to final failure under the test load sequence 

(4) Residual strength data from static failure of the cracked specimen under the test 

load sequence, which include the failing load and the extent of fatigue cracking 

CURRENT APPROACHES TO SAFETY IN FATIGUE 

The current practice is to obtain from these results a mean fatigue life Nj_, 
corresponding to failure at some arbitrarily selected point on the crack propagation 
curve. 

For a safe -life structure, N L may be the life at which the specimen broke in the 
fatigue test or the life at which it would be estimated to fail under some specified load 
such as limit load. For a fail-safe structure, N L is often taken to be the test life at 
which the fatigue failure became readily detectable by the inspection procedures that 
would be used in service. 

In order to allow for variability in fatigue performance for either structure, the 
estimated mean life N^ is divided by a scatter factor to obtain a safe operating period 
for replacement or inspection of the structure. The scatter factor is obtained by using an 
assumed probability distribution of fatigue life with an acceptable probability of failure. 

DIFFICULTY WITH CURRENT METHODS 


The difficulty with the previously discussed procedure is that although the safe life 
to replacement or inspection is based on failure at a given point on the crack growth 
curve, there is, in service, an increasing risk of failure as the fatigue crack extends and 
the structure may fail at any stage of the crack propagation. 

This difficulty is well illustrated by the measurement of the collapse load of Mustang 
wings that were fatigue tested to destruction under a random load sequence (ref. 1). In 
figure 29 of reference 1, the relative frequency distribution is presented for the load at 
failure as determined by experiment. For the twelve structures tested the results indicate 
a wide range in the failing load from 30 percent to 60 percent of the ultimate load of the 
virgin structure. This means that for a given life the safety level in service may be sig- 
nificantly different from that indicated by the fatigue test result. 
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Clearly the effect will depend on the shape of the crack growth curve and on the 
service load spectrum; however to investigate the question further an example of an 
ultrahigh- strength steel welded structure has been taken. The crack propagation and 
residual strength curves of this structure are shown in figure 1 and indicate a reasonably 
typical safe-life construction in that once a fatigue crack has developed there is a very 
marked reduction in strength which leads rapidly to failure. 

The probability of survival has been calculated for this structure by the conventional 
method, taking two rather extreme cases for the definition of failure as follows: 

(1) Failure occurs at the limit load. This is a relatively high value of the load, 
being near the upper limit of loads at which failure would be expected in service. 

n l = n sL . 

(2) Failure occurs at the mean load. This is the lowest load at which service 
failure can occur and it will give a lower limit to the definition of failing load. Nl = Np. 

The probabilities of survival corresponding to definitions (1) and (2), L sL and 
Lp, have been evaluated for the two load spectra shown in figure 2 by a log normal dis- 
tribution of fatigue life. 

If Nj is the fatigue life to any crack length l and Nj is the median value, then 



has a logarithmic normal distribution and 

L F (N) = C ._ P z (z) dz (1) 

J N/N F z 

Lsl(n) = C/» sL p ‘ (z) * (2) 

The results are plotted for the manoeuvre load spectrum and the gust load spectrum 
in figures 3 and 4, respectively. For both spectra, Lp is considerably more than L sL ; 
this indicates that the point on the crack growth curve at which failure is defined will 
have a significant effect on the safety level. 

RELIABILITY ANALYSIS OF FATIGUE FAILURE 


Consider a more representative model of the fatigue process in which a structure 
progressively weakened by the fatigue crack may be broken by a service load at any stage 
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of the crack propagation. The structure may survive this risk and continue in service 
until the fatigue crack has reached the stage where the crack propagation curve is rising 
practically vertical. The residual strength of the structure then drops rapidly until it 
reaches the mean load when failure must ensue. This is essentially a case where failure 
occurs by the fatigue process alone and in this paper the failure is termed "fatigue 
fracture." 

The risk of failure in this mode has been considered in the section "Interpretation 
of Fatigue Test Results" where the probability of survival L F (N) at the life N has 
been derived in equation (1) as 



P z (z) dz 


and the corresponding risk of failure is readily obtained as 


r F (N) = 


p>/ s f) 



p z (z) dz 


( 3 ) 


In addition to the risk due to fatigue fracture, there is the risk of failure due to 
chance occurrence of a service load on a structure weakened by fatigue cracking although 
the structure is still able to maintain the steady load. Current methods fail to take full 
account of this risk which is called herein the "risk of static fracture due to fatigue" and 
denoted as r s (N). 

The total probability of fatigue failure at N is therefore given by 


r FT (N) = r s (N) + r p (N) (4) 

If it is desired to indicate a specified value of the service life, N s may be used rather 
than N; therefore, an alternative form of equation (4) is 


r FT( N s) = r s( N s) + r F( N s) 


RELIABILITY ANALYSIS WITH VARIABILITY IN FATIGUE STRENGTH 

First consider the risk of static fracture due to fatigue in the simplified case where 
there is no variability in static strength but a characteristic distribution of fatigue life at 
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any given crack length. Next consider the probability of failure in the fleet at the Nth 
load cycle (i.e., the risk of failure at life N) of structures all containing cracks of the 
same crack length a which may be expressed nondimensionally in terms of the crack 
length a F at which the structure would fail under the mean load; that is, l = a/a F . 

Let Sn denote the Nth service load and Rtf) the residual strength of structures 
with crack length l. Rtf) is a decreasing function of l and may be expressed non- 
dimensionally in terms of the ultimate strength n 0 of an ^cracked structure as 


Hence 


Pr ^Failure at life N | crack length ij = Pf(N/£) 

= Pr jstf ^ Rtf)J 
= Pr jSjj ^ 

= F s (m 0 4>H) 


( 6 ) 


where F s (s) is the probability of exceeding any service load s. The total probability 
of failure in the fleet at life N (i.e., the risk of failure at N) is then obtained by 
summing over all crack lengths from 1 = 0 to 1 = 1 

r i 

r s,fx(N) = J 0 PF<N/0 PW * 

= f F s (m 0 4>H)p( 0 d2 (7) 

J 0 

where r s M (N) denotes the risk of static fracture at the life N assuming that there is 

no variability in the static strength at a given crack length. 

The probability density function ptf) of the crack length l at any given life N 
is not known but this difficulty is overcome by transposing the variate from crack length 
at a given life to life at a given crack length. This is done by using the model of the 
fatigue process shown in figure 5 in which it is assumed that for any structure the life Nj 
bears a constant ratio z to the median life N^ at the same crack length l, 

N Z = zN t 
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(8) 


or by expressing life nondimensionally in terms of the median life to initial failure Nj 
Nf 


= n, = 


Ni 


l l = zn l 


where z is constant for any structure and is called the life factor. By considering the 
shaded element in figure 5 it can be seen that structures with crack lengths between l 
and l + dl at N have initial lives between n A and n* + dnp Hence 

p(f) dZ = p(ni) dni 
= p(z) dz 

since z = ^ This expression neglects the effect on the probability density function of 
n i of the very few structures that have failed between n; and n c . 

If the equation of the median crack propagation curve 


1 = g(fy) = g(nz/z) 

is used, equation (7) can now be transformed by changing the variable of crack length l 
to one of fatigue life represented by the life factor z. Taking z = n at l = 0 and 
z = '= — a * l = 1, equation (7) can now be written as 

np 


r 


s 



p(z) dz 


( 10 ) 


RELIABILITY ANALYSIS WITH VARIABILITY IN FATIGUE STRENGTH 

AND STATIC STRENGTH 

In the preceding section it was assumed that there was no variability in the residual 
strength property, whereas, in general, at any crack length l, the residual strength R(Z) 
will have a probability distribution about a mean value p R (Z). If the dimensionless 

variate x(Z) = -ML is assumed to have a characteristic distribution which applies for 
all values of crack length, then 

R(D = MrU)x(Z) 
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and n R (l) can be expressed as a decreasing function of l from equation (5) as 
R(Z) = n Q <f>(l) x(l) 

This is analogous to equation (6), and integrating over all crack lengths gives as before 
r s ( n | x(Z)) = £ F s |xMo0(g[i])j P( z ) 

To obtain the total risk of static fracture at n, integrate over all values of x(Z) from 
0 to °° to get 



p(z)p(x) dz dx 


( 12 ) 


This equation is the general expression for the risk of static fracture by fatigue at 
life n. As stated earlier an alternative expression using n s instead of n may be 
adopted where the risk at a specified value n s of the service life is desired. This 

expression is 


r s( n s) 



p(z) p(x) dz dx 


PROBABILITY DISTRIBUTION OF THE LOAD AT FAILURE 

It is of interest to consider the probability distribution of the load at failure since 
this indicates how the risk of failure is being affected by the changing residual strength of 
aircraft in the fleet. 

The condition for investigation is the probability that at a given life n s structures 
will fail with a residual strength less than some specified value R 0 . 

Requiring 

R = R 0 

or 

- JL < R ° 

* ” P'R “ ^R 
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then substituting 


Mr ~ M 0 <M*) 

x£ _?o_ 

“ M 0 <*>« 



where 


R c 

x_ = — 
° M r 


and transposing the variate from crack length l to the life factor z give 


X 5 


<Mg| 


From equation (11) 

Pr jstatic fracture at n s with the collapse load S R^j 
= r s[ n s | R = M 0 x 0 j 

r x °/Rw) Fs f x 

J n s /n F J x=0 


x M o 0g 


-tr )? P( x ) P( z ) dx dz 


(13) 


where 


x = 

0 M 0 


Since the total probability of static fracture due to fatigue at ng is given by 

r s( n s), th e required probability distribution for the load at failure at a specified life n s 
is as follows: 


288 



Pr ^Failing load ^ M 0 x o a * n sj 


r n s r x oy4{g Fs- XMo^(g ^ )] p(x) p(z) dx dz 
~ ^n s /n F ^0 r s( n s) 


(14) 


APPLICATION OF THE METHOD 


To illustrate the method of reliability analysis and to compare the results according 
to the various risk functions in equations (2), (1), (10), and (12), the risk of failure has 
been calculated for a nonredundant high-strength steel structure. Sample test data for 
the structure are shown in figure 1. 


The crack propagation curve has been determined from the results of a representa- 
tive full-scale fatigue test in which fractographic examination of the fracture surface of 
the critical failures has been used to determine the crack dimensions at various stages 
of the test life. Although the curve in figure 1 is based on the crack length at the surface 
of the material, use of the nondimensional relative crack length l = enables it to 

represent also the crack depth or any other leading dimension of the crack front. 


I = 


Mr 

The residual strength curve = <p(l) has been estimated from the relationship 

Mo 

based on fracture mechanics theory, where A is a constant depending pri- 


\<V 


marily on the fracture toughness of the material and the shape of the crack front. 


The variability in residual strength about the mean value pr was assumed to 
follow the three parameter Weibull distribution, and with representative data on small 

steel specimens (ref. 3), the following expression was obtained for the probability distri- 

R 

bution of the relative residual strength x = — : 

Mr 


P x (x) = Pr =x| = 1 - exp -« 


x - 0.824 
1.017 - 0.824 


•n 2.55 

i) 


The crack length at failure under limit load, according to the relevant fatigue test 
data used, is approximately 0.08 in., giving a crack depth of 0.04 in. for a semicircular 
crack. 

The distribution of fatigue life about the median value was assumed to be log normal 
with variance ‘'logN of0 02 - 
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Two service load spectra were assumed as shown in figure 2. Spectrum I is a 
spectrum of manoeuvre load derived from data on U.S. jet fighter operations in refer- 
ence 4. A median life to initial failure of 2000 hours was assumed to correspond to the 
fatigue test result, and an ultimate load factor of 10 was assumed, which gives a mean 
load of 10 percent of the design ultimate. 

Spectrum II was based on thunderstorm gust load data from reference 5 giving the 
probability of exceeding a gust load U as F U (U) = Expressing load non- 

dimensionally as 


S Ult 

where S is the load due to a gust velocity U and S^t the load corresponding to 
the ultimate design gust velocity of 99 fps with the mean load of the aircraft assumed to 
be 20 percent of the design ultimate, gives the following equation for the gust load 
spectrum: 


F S (Y) = g -24.4(Y-0.2) 

A life to initial failure of 20000 hours was assumed as typical of this type of spectrum. 

The four different risk functions of equations (1), (2), (10), and (12) have been 
evaluated by using numerical analysis techniques (ref. 6) for both spectra I and n. The 
corresponding probabilities of survival to life n have been calculated from the relation- 
- r(t) dt 

ship L(n) = e and are plotted for spectrum I and spectrum II in figures 3 and 4, 

respectively. 

These results show that conventional safe-life estimates as represented by L s l 
(L s l corresponds to static fracture of a fatigue cracked structure under limit load and 
is in accordance with current life estimation procedures) can be inaccurate since they 
fail to take proper account of the risk of static fracture of the structure weakened by the 
growing fatigue crack. 

Comparison of L s and Lg^ indicates that the variability in residual strength 
has a significant effect on the probability of survival (or failure). The probability of 
survival L F refers to failure due to the fatigue fracture extending to the stage where the 
structure is not able to sustain the steady mean load. The risk from this type of failure is 
often small but as mentioned previously it must be included in the total risk. 
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RISK OF FAILURE IN STRUCTURES INITIALLY CRACKED 


With the high-strength materials of low ductility now being introduced into aircraft 
construction there is a difficulty of detecting very small cracks with current nondestruc- 
tive inspection (NDI) techniques. This factor together with the susceptibility of these 
high-strength materials to the formation of flaws in the production process may result in 
a probability of cracks existing in a number of aircraft structures before they go into 
service. 


STRUCTURES WITH INITIAL CRACKS OF CONSTANT LENGTH 

In the most adverse case, all structures are assumed to be cracked in the fatigue 
critical areas to a relative crack length l Q which corresponds to the maximum length of 
crack that will escape detection. According to this assumption all structures start their 
service life with a crack of length l 0 present. 

In the model of the fatigue process illustrated in figure 5, all the crack propagation 
curves can be regarded as radiating from a single point or pole P. If all structures are 
initially cracked to the same length l Q , this corresponds to shifting the pole to the 
point P' with coordinates (n 0 ,£ 0 ) as shown in figure 6. Each structure now starts its 
service life h at the life n 0 which would have produced a fatigue crack of length l Q 
in this particular structure. This infers that the initial crack or defect induces the same 
stress field as a fatigue crack of the same dimensions in the area being considered. It 
may be regarded as a fair assumption since under repeated loading the defect will rapidly 
initiate a fatigue crack which can be expected to give rise to a similar stress field as that 
which would result if the crack had been produced by fatigue alone. 

Referring to figure 6 shows that for any structure which has a life factor z = n^/nj, 
the service life fy to any crack length l is given by 

h f = H ~ n o = zR l ~ zff o = z ( K i - ff o) 

For the median values, 

h = H - 

Hence 

= zfijj (15) 
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Therefore, the same model of the crack propagation process applies as for structures 
without initial cracks except that the origin is shifted to (no>^o)> the service life is given 
by h s = (n s - iIq) = z(n s - fi 0 )= zh s , and the equation of the median crack propagation 
curve is transformed to 

* = g(fy + fi o) = g(j- + fi o) ( 16 > 

The risk of failure is therefore obtained in the same way as for structures initially 
uncracked, and by integrating over crack lengths from l = l 0 to 2 = 1, the following 
equation is obtained from equation (7): 


r s,/x( n I *o) = 



p(2) d l 


(17) 


Hence if the variable is changed from one of crack length to one of fatigue life at a 
given crack length as represented by the life factor z, the following equation is obtained 
from equations (17) and (16): 


,M " e 1 * o) ’ W(SF-«o) 



p(z) dz 


(18) 


where r s f p,(h s | 2 Q ) denotes the risk of failure at a particular operating life h s of 
structures having initial cracks of length l Q and having no variability in residual 
strength. 

The corresponding expression when there is a probability distribution of residual 
strength x given by p(x) can be derived from equation (18) as 


r s( h s 


lo) = f f ,, _ x F s{ x M 0 4>[g(ir + n 0 )l}p(z)p(x) dz dx 

^0 J h s /(n F -n 0 J V. L V 


(19) 


where r s (h s | l Q ) denotes the risk of failure at service life h s for structures which 
are all cracked to a length l Q at the start of their service life. 

The risk of failure by fatigue fracture for this case follows from the expression 
given in equation (3) and is 
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( 20 ) 


r F( h s | *o) 


Pz 


\ 

np _ *k>) 



p z (z) dz 


The corresponding probabilities of survival can then be calculated as before. 

STRUCTURES WITH INITIAL CRACKS OF VARIOUS LENGTHS 

In the general case the population of structures will contain cracks ranging from 
zero length up to the detectable length l 0 and it can be assumed that there is a proba- 
bility of a structure containing a crack of length l c between 0 and l 0 as given by 
the probability density function p(f c ) . 

Consider the fraction of the population p(fc) ^c which has initial crack lengths 
between l c and l c + dl c . The probability of failure at h s for these structures is 
given by r(h s | lc) according to equation (19). Their contribution to the total risk of 
failure in the population at service life hg is therefore, 

Ar = r(h s | l c ) p(l c ) d l c (21) 

Since h s is the same for all structures whatever their initial crack length l c , the 
total risk of failure for all structures at service life h s may be calculated by integrating 
equation (21) over all values of initial crack length from l c = 0 to l c = l 0 • Then 

r s (h s I P(*c)) = f C ° r(h s | l c ) P(*c) ^c (22) 

J lc= 0 

As was done in the derivation of r s (h s | l Q ) in equation (19), the variable of initial 
crack length l c is expressed as the corresponding life fie on the median crack propa- 
gation curve, with l c = g (n c ) and 

P(fc) cE c = p(n c ) dn c 

Then, since fi c = fii when l c = 0 and fi c = n Q when l c = l 0 , the following equa- 
tion is obtained from equation (22) by substituting r(h s | lc) from equation (19). 


pn c =n 0 ^z=- 

s( h s I P( z c)) J X= Q •Jz=h s /(iiF-nc) 



p(z) p(x) p(ric) dx dz dnc 


( 23 ) 
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Similarly the risk of fatigue fracture can be derived from equation (20) 

r F (h s 


^ pn c =n 0 jpzjhs/( n F " ^c^ p(*k:) 
^n r =l f ff c=n 0 r °° r , w n /si 


as 


; n c =l f n c-^o r‘ 

J n c =l J h 


i/t ff F" ff c) 


p z (z)p(n c ) dz dn c 


(24) 


PROBABILITY DISTRIBUTION OF THE FAILING LOAD 


The probability distribution of the failing load can be determined for the case of 
structures with initial cracks by a simple extension of the method developed in the sec- 
tion "Probability Distribution of the Load at Failure." 

If one is interested in structures with residual strength R less than some speci- 
fied value Rq, then as in the aforementioned section this corresponds to structures with 


< x o 

(^R/^o) 



(25) 


Consider structures with initial cracks of length l c corresponding to a life of ff c 
on the median crack propagation curve. Now from equation (16) 


~ = <P(D = 0 

Mo 



Hence substituting this equality into equation (25) gives the following equation: 


X 



(26) 


Thus, for structures with initial cracks of length l c it follows from equation (19) that 
the probability of failure with residual strength less than some given fraction x„ 
of the virgin strength is given by 



The total risk of static fracture due to fatigue at h s is given by r s (h s j l c ) and 
therefore it follows that 
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C- 0 



Pr failing load ^ Mc^o 

p°o pX Q 

h s/( R F _ff c) 



F s{xM o 0 

f(r +H c) 

^ p(x) p(z) dx dz 


r s( h s 1 

*c) 


( 28 ) 


Where the population of structures have initial cracks with a probability distribution of 
crack length represented by p(Z c ) it follows from equation (23) that the probability of 
failure with relative strength R/mr less than x 0 is given by an analogous expression 

to equation (27) as follows 


P(*c) 
R=XoPoJ 


= f° r - f 

J h s /(n F -n c ) C 


fr [g(x +f Q] 


F S {W 0 <P 


r(^ + p(x)p(z)p(fl c ) dx dz dn c 


(29) 


If equation (29) is divided by 
fatigue at h s , the probability that 


r s (h s | P(ic)), the total risk of static fracture due to 
R ^ XqHq at h s is obtained as follows: 


p 


r n o r" r x o/>[g(¥ +s c)] F J 

I P (lc)[ 'W(“F' S c) 

r 

[ g (^ +S c| 

> p(x) p(z) p(n c ) dx dz dfi c 
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APPLICATION 


The foregoing theory has been applied to calculate the risk of failure for the 
ultrahigh- strength steel structures considered previously for which the crack propagation 
and residual strength curves are shown in figure 1. The load spectrum used in the calcu- 
lations was the manoeuvre load spectrum shown in figure 2 as spectrum I. 

For the case of structures all initially cracked to the same extent, the relative 
crack length l Q has been taken as 0.075 from a consideration of the crack detection 
capability of the NDI techniques used in production. 

For the case where it is assumed that there is a continuous probability distribution 
of initial crack size, an exponential distribution of initial crack length l c has been 
adopted with the probability density function 


p(f c ) = 26. 2e 


-20.6Z C 


(0gf c = 0 - 075 ) ( 31 ) 
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The exponential distribution has been adopted since it follows from the physically 
realistic assumption that the occurrence of a defect in a small element of the material 
follows a uniform probability law over the whole volume. 

The detectable crack length for in-service inspections has been taken as 0.15. 

As stated in the section "Structures With Initial Cracks of Constant Length," the 
theory assumes that the initial defect produces the same stress field as a fatigue crack 
the same size as the defect. In applying fracture mechanics theory to deduce crack 
propagation and residual strength characteristics, the depth of the crack is the important 
parameter, whereas for crack detection, the length of the crack exposed at the surface is 
the controlling factor. However, with the nondime ns ional relative crack length 

/ = 

a jr (32) 

it is immaterial whether crack length or crack depth is taken since both yield the same 
value of l , provided the shape of the crack front does not change markedly as the crack 
propagates. 

In establishing the detectable relative crack lengths l Q and l D , it has been 
assumed that the crack length exposed at the surface which will be detected by the best 
available methods is 0.02 inch for production-line conditions and 0.04 inch for in-service 
inspections. Assuming a semicircular crack front, which is often characteristic of 
cracks originating at a surface, gives corresponding crack depths of 0.01 and 
0.02 inch. 

A value of ap of 0.132 inch was obtained from typical crack propagation data by 
determining the crack depth at which the crack propagation curve becomes vertical since 
this is virtually equivalent to failure at mean load. The relative crack lengths Iq and 
given previously were thus obtained from equation (32). 

With these input data, the risk functions r s *(h | 0.01") and r s *(h | p(f c )) for the 
two cases of constant initial crack depth of 0.075 and an exponential distribution of initial 
crack depths have been evaluated from equations (19) and (23) and are plotted in figures 7 
and 9, respectively. The corresponding survivorship functions are plotted in figures 8 
and 10. The probability distribution of the failing load at various service lives h s has 
been calculated from equation (28) and the results are presented in figure 11. 

It is apparent that the presence of initial cracks greatly increases the risk of failure 
at a given life. Also the risk of failure at the beginning of the service life is finite in this 
case as distinct from the case where all structures are without cracks initially. This 
arises because with all structures cracked initially every member of the fleet is exposed 
to the risk of static fracture from the outset. 
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SAFETY BY INSPECTION 


As inspection techniques become more highly developed, increasing applications 
are likely to be found in monitoring structural safety. However, inspections of a complex 
aircraft structure are both time consuming and costly, and the efficient planning of 
inspection intervals is becoming an essential requirement. The reliability approach by 
calculating the risk of failure as a function of life enables the effect of any inspection pro- 
cedure to be investigated and suitable inspection intervals to be planned. 

CONTINUOUS INSPECTION 

The optimum effect of inspection is, of course, obtained when every structure is 
inspected continuously. As soon as cracks reach the detectable length Z D , remedial 
action is taken and therefore the risk of fatigue fracture is eliminated. 

The risk of failure is then equal to the risk of static fracture by fatigue which is 
determined by calculating the probability of failure for structures with crack lengths 
between 1 = 0 and l = 

If structures are repaired and replaced when cracks are detected, there is no 
reduction in size of the fleet and the risk of failure at any life n s is obtained by inte- 
grating in equation (12) between the limits z = to z = n s since this corresponds to 
integrating over crack lengths between 0 and Z]> (See fig . 5.) 

Hence the risk of failure for "continuous inspection with replacement" is given by 

ri> s ;lD,n s ) * f, C Fs{*Mo<4[^]|pMp<*> * * <33 

n s/ n D 

The corresponding result for structures which are initially cracked is found in a 
similar manner from equation (20); that is, 


ri*(h s | P(*c);*D,h s ) = jT"! 0 f f //- ~ , + 4 }p(*> PW p( K c) dz dx dn c (34) 

' J n c =ni ^0 J h s ^nD-n c j V s 


When cracked structures are not repaired but are taken out of service after detec- 
tion, there is a continual depletion of the population since at life n s all structures which 
have a life less than n s at crack length Zp> are eliminated by inspection; that is, the 
distribution of fatigue life p(z) is truncated at z = and hence the proportion of the 

J * °o j 

n s /n£) < ^ Z ' 
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Therefore, for "inspection without replacement" the risk of failure at n s (which 
is the probability of failure in the fleet remaining at n s ) is derived from equation (33) as 


r I*( n s^D> n s) 

r l(n s ;fD,n s ) = (35) 

\ p(z) dz 
Jn s/ n D 


In a similar way the risk of failure for inspection without replacement in a population of 
structures which are initially cracked follows from equation (34) as 


r t (hs I PMWj- . . iLltl \ p t ic > ;i D’ h s) 

pn^-rio p°° 


dz dn„ 


(36) 


INSPECTION FOR LIMITED RISK 

In practice, it is usually not economic or even feasible to inspect structures con- 
tinuously but inspection is carried out at predetermined intervals. A method is proposed 
for the efficient planning of inspection intervals in which, when the risk of static fracture 
by fatigue reaches a prescribed upper limit, an inspection is carried out. The risk of 
failure is reduced at this stage to the same value as the risk of failure with continuous 
inspection, but it rises as the life continues until it again reaches the prescribed risk 
limit when a second inspection is carried out. 

Repeated application of this process ensures that each inspection is equally effective 
in maintaining the risk of failure below a prescribed upper limit. The application of the 
procedure is shown in a subsequent section, and the expression for the risk function is 
presented in the appendix. 


CRACK DETECTION RATE 

It is important to determine the probability of cracks being detected at each inspec- 
tion since this gives the fraction of the fleet that can be expected to require repair and 
modification before continuing in service. 

Reference to the model of the fatigue process in figure 5 shows that in the first 
inspection at life nj^) all structures with crack lengths between l = and 1 = 1 are 

eliminated. These correspond to structures which have values of z between z = 

ff D 
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and z = Hence the fraction of the population in which cracks are expected to be 

n F 

revealed at the first inspection is given by 


n I(l)/ ff D 


*, .. \ P 1 '/ 


p(z) dz 


(37) 


Or in general for the mth inspection, the probability of cracks being detected in a struc- 
ture is given by 


r D>I(m);*D> n I(m-l)) = p (m) ^ p(z) dz 


(38) 


where denotes the probability of finding cracks at the mth 

inspection at life m^) following the previous inspection at life n!( m _i). It is 
assumed that cracks with a length greater than 1-q will be detected and that structures 
in which cracks have been detected will be repaired and returned to service. 

For structures with initial crack lengths l = l Q it can be seen by reference to 
figure 6 that the probability of detecting cracks is 


f h I(m)/( a D‘ fI o) 


r D>I(m) I VD,h«m-l)) = \ I(m _ 1) /(H D -il 0 ) 


p(z) dz 


(39) 


where, with a similar notation as for equation (38), r D *(h!( m ) | Z 0 ^D’ h I(m-l)) denotes 
the probability of detection at the mth inspection after a period of operation in service of 
^I(m)> foll° w i n £ a previous inspection at hj( m _i). It is again assumed that all cracks 
with a length exceeding 1-q will be detected and nj) and iIq denote the lives on the 
median crack propagation curve corresponding to crack lengths of and l Q . 

If the population of structures has a continuous distribution p(Z c ) of initial crack 
lengths between l c = 0 and Z c = l Q the probability of detection can be derived from 
equation (39) by integrating over the initial crack lengths from l c = 0 to l c = l Q , 


. , . f*o p h I(m)/( ff D-n c ) 

r D ( h I(m) I P(ic);iD.t>I(m-l)) = 


p(z) p(^c) die 


or 
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(40) 


r D*( h I(m) | P( Z c); z D. h l(m-l)) = jl° f ’ ® ^ p(z)p(n c ) dz dn c 

n i Jh I(m-l)/( n D-n c ) 

expressing l c in terms of the corresponding life n c according to the median crack 
propagation curve, and integrating with n c = ni at l c = 0 and n c = Hq at l c = l 

APPLICATION 

The foregoing theory has been applied to demonstrate the effect of planned inspec- 
tion procedures for the case of a high-strength steel structure under a manoeuvre load 
spectrum (spectrum I in fig. 2) which has been considered previously. 

The risk function for fatigue failure with continuous inspection has been calculated 
by using numerical analysis procedures (ref. 6) for the three cases of structures without 
initial cracks, structures with initial cracks of constant length l 0 , and structures with a 
distribution of initial crack sizes given by the probability density function p(f c ). The 
risk functions for periodic inspection with limited risk have been calculated for the same 
three cases. The results have been plotted in figures 12, 7, and 9, respectively, and the 
corresponding survivorship functions are shown in figures 13, 8, and 10. The inspection 
intervals for inspection with limited risk for each of the three cases are shown in table I 
together with the expected detection rate at each inspection which has been calculated 
according to the procedure developed in the preceding section. 

With periodic inspection, the risk function returns to the continuous inspection curve 
at each inspection. The continuous inspection curve therefore has a basic significance 
since it indicates the maximum extent to which the risk of failure can be reduced by 
inspection. 


DISCUSSION OF RESULTS 


Consider the results of applying the foregoing theory to the case of the high-strength 
steel structure described previously with particular reference to the suitability of the fail- 
safe and safe-life procedures. 


RISK OF FATIGUE FAILURE 

Reference to the risk functions r gL and r F in figure 14 illustrates the difficulty 
with the conventional approach. As the life extends, the difference in these two risks 
becomes considerable, although as was stated in the section "Interpretation of Fatigue 
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Test Results” they merely represent two rather extreme conditions in the application of 
the conventional safe -life approach. 

In fact, the risks r sL and r F differ only in the point on the crack growth curve 

at which failure is taken to occur. This difference introduces a problem in the interpre- 
tation of the fatigue test result since the structure under a representative test load 
sequence may well fail at a rather different stage of the crack propagation curve as com- 
pared with the structures that happen to fail at a relatively short fatigue life in service. 

This can be seen by reference to the curves of the probability distribution of the 
failing load in figure 15. These show that at lives typical of service operation (n = 1.0 
to 1 25) the expected value of the failing load, for the few structures that fail, is rela- 
tively high, being above the limit load, whereas at longer lives the expected value of the 
failing load is considerably reduced. Therefore the fatigue test specimen, representing 
the average structure, is likely to fail at loads considerably below those at which service 

failures will occur. 

The basic difficulty is that neither r gL nor r F represents the true situation in 

that they do not take account of the fact that there is some probability of failure at all 
points along the crack propagation curve as the fatigue crack extends. This effect (the 
risk of static fracture) is taken account of by L S)M (n) which, as can be seen in figures 
and 4, gives an increased probability of failure for the example taken. 

Another effect of considerable importance in considering static fracture due to 
fatigue is the variability in residual static strength of cracked structures since this may 
have a significant effect on the probability of failure (or survival) depending on the sever- 
ity of the loading spectrum. This is shown by the comparison between L SjM and L s 
for the two load spectra as shown in figures 3 and 4. The probability of survival L s 
calculates the increasing risk of failure as the fatigue crack extends in the same way as 
L s M but it also includes the effect of the variability in residual static strength. 

The probability of survival L s can be applied with equal validity to calculate the 
probability of survival for structures with initial cracks as outlined in the section "Risk 
of Failure in Structures Initially Cracked." This has been done for example of the high- 
strength steel structure taken previously and the results for two cases of initial cracking 
are shown in figures 8 and 10 where it will be noted that, for an equivalent probability of 
survival, the fatigue life is greatly reduced by the presence of initial cracks. The short- 
comings of the conventional methods of life calculation are more marked in this case, 
since for all structures the whole of the service life involves the propagation of a fatigue 
crack with continual exposure to the progressively increasing risk of static fracture due 

to fatigue. 
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PROBABILITY DISTRIBUTION OF THE FAILING LOAD 


Curves showing the probability distribution of the collapse load for static fracture 
by fatigue for the high-tensile steel structure are shown at a series of lives in figure 15. 
In the early stages of the life when only small cracks are present the majority of the 
structures that fail do so from occurrence of a high load in excess of the design limit 
load. At longer lives, however, when a large percentage of the fleet has developed more 
extensive fatigue cracks, failure tends to take place by the occurrence of the much more 
frequent lower loads. The curves for the probability distribution of the failing load have 
a well defined "knee” which marks the transition from failures of structures with low 
static strength properties (according to the Weibull distribution of relative strength which 

has a lower limit at x = 0.82) to structures with low fatigue strength and hence larger 
crack lengths at any given life. 


„ ” corresponding curves in figure 11, lor all structures with initial cracks of 

a 0.010-inch depth, this knee does not occur. In this case, at any particular life all 
structures have substantial cracks and the extent of these is largely independent'of the 

fatigue strength so that the probability distribution of static strength is the controlling 
factor for all values of failing load. " 


THE EFFECT OF INSPECTION 

The effect of inspection on the risk of failure and probability of survival for initially 
uncracked structures is shown in figures 12 and 13. Although it is not usually a feasible 
procedure in practice, continuous inspection has an important basic significance which 
warrants some consideration here. 

The risk function for continuous inspection slowly approaches an upper limiting 
value when there is no repair and replacement of structures in which cracks are detected 
("inspection without replacement"). This situation arises because as the initial cracks 
are propagated by fatigue to the detectable length these structures are eliminated by 
inspection and a stage is therefore reached where the increase in risk due to the extension 
of fatigue cracks is offset by the continual removal from service of structures with 
ctetcct&ble cracks and high risk of failure. 

In the more practical case where structures are repaired and returned to service 
after detection of cracks ("inspection with replacement") the risk function goes through a 
maximum value and then eventually approaches zero. The explanation of this behaviour 
appears to be that, as fatigue cracks extend, the number of cracked structures replaced by 
sound structures increases until a stage is reached where this counteracts and then 
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outweighs the increasing risk of static fracture by fatigue in the dwindling members of 
the original fleet. 

With this model therefore the original fleet is eventually replaced by new struc- 
tures which are taken to be free of any fatigue weakness and the risk of fatigue failure 
decreases to zero. If the service life were to be prolonged to this stage, however, other 
areas of the structure would become fatigue critical and their risk of failure would have 

to be considered. 

In practice, cracked structures or components are often replaced by new members 
from the same population as the structures or components in the original fleet. This 
model of the fatigue process ("inspection with renewal") would show a behaviour inter- 
mediate between the two procedures considered above. 

The risk functions for continuous inspection of structures with initial cracks are 
presented in figures 7 and 9 and these show a similar behaviour to that found with initially 
uncracked structures although for the case of a continuous distribution of initial crack 
size in figure 9 the peak of the "inspection with replacement" curve is much flatter 
because of the wider range of crack sizes that results. 

Turning now to the practical case of periodic inspections designed to limit the risk 
of failure below a specified value r max , it can be seen from figures 12, 7, and 9 that in 
all cases the risk of failure fluctuates between the risk for continuous inspection and the 
specified maximum value r max - 

For inspection with replacement it can be seen that because of the peak in the curve 
for the risk function with continuous inspection, the inspection intervals for limited risk 
at first decrease with each inspection and then increase. 

This effect is clearly shown for the three cases considered by the inspection inter- 
vals given in table I which also lists the expected fraction of the fleet in which cracks will 
be detected at each inspection. 

The curves showing the corresponding survivorship functions for inspection with 
limited risk are shown in figures 13, 8, and 10, and it is apparent that inspection for 
limited risk can give a comparable performance to the ideal case of continuous inspection. 
At the cost of decreasing the inspection intervals, the probability of survival can be 
increased by reducing the maximum allowable risk r max , although this must always 
exceed the maximum risk for continuous inspection for the inspection procedure with 
limited risk to be possible. 
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APPLICATION 


The reliability approach to structural design has received increasing attention in 
recent years and it is proposed here that the safety against fatigue of aircraft structures 
is one of the most important and promising fields of application. 


DEVELOPMENT OF THE RELIABILITY APPROACH TO FATIGUE 

Early work on the probabilistic approach to fatigue of aircraft structures was 
mainly concerned with efforts to establish the fail-safe philosophy on a more quantitative 

basis by considering the probability of failure of the structure during the crack propaga- 
tion stage. 

One of the first papers on this subject was concerned with the fail-safe operation of 
transport aircraft (ref. 7), and a similar approach was used subsequently (refs. 8 and 9) 
m efforts to develop a proposal for ensuring the airworthiness of fail-safe structures. 

In references 10 and 11 reliability analysis was applied to derive the probability of 
failure for a fail-safe structure by using a sophisticated model to represent the effect of 
multiple redundancies in the structure. 

Probably influenced by the successful application of reliability techniques to 
electronic systems, the reliability approach to structural safety in general received 
increasing attention and several papers dealing with the basic development of the phi- 
losophy (refs. 12 to 15) also dealt at some length with its application to the fatigue of 
structures. 

The reliability approach to structural design has received increasing attention more 
recently and papers (some relating to the aspect of fatigue) have been represented at a 
number of International Conferences (refs. 16 to 24). 

However, a major difficulty in applying reliability theory to the fatigue of struc- 
tures is the extensive amount of data required since this is not normally available. The 
present paper seeks to overcome this difficulty by presenting an approach which allows 
representative data to be used in conjunction with the full utilisation of the information 

which can be obtained from the full-scale tests now widely adopted in aircraft design 
practice. & 


RELIABILITY ANALYSIS WITH FULL-SCALE TESTING 


The method proposed in this paper calculates the probability of failure of a structure 
at each stage of the life with data obtained from full-scale tests on the actual structure in 
conjunction with other representative data. It therefore estimates the risk of failure in 
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the fleet, and hence the probability of failure (or survival) up to any required life, taking 
account of the flight loads to be encountered, the progressive reduction in strength due to 
the growing fatigue crack, and the variability in static and fatigue strength. 

The inspection or replacement of structures in service can then be planned to 
achieve a prescribed safety level using basic data from the fatigue test without requiring 
any arbitrary decision as to the crack length that constitutes failure or as to whether a 
structure is "fail safe" or not. 


Application of the Method 

With the risk function having been calculated, the life nj to reach the allowable 
risk rmax( n l) determined as the life for inspection or replacement. 

From the physical nature of the failure as revealed by the fatigue test and the risk 
function for continuous inspection with the detectable crack length, a judgement can be 
made whether to rely on inspection or on replacement. 

If replacement is decided on all structures are replaced at nj and the process can 
be repeated with the constant inspection interval nj until the probability of survival has 
been reduced to the minimum allowable value. 

If inspection is adopted the inspection intervals are calculated as described in the 
section "Inspection for Limited Risk" and the process is continued up to the life n s at 
which the probability of survival has been reduced to the minimum allowable value. The 
fraction of defective structures that can be expected to be revealed at each inspection 
can be calculated from equation (39). Also the probability distribution of the failing load 
can be calculated and used to estimate the average value of the failing load at the life for 
any inspection, from which an indication of the average crack length can be obtained. 

It is clear from figures 13 and 10 that the safe operating life can be greatly extended 
by this type of inspection procedure and therefore as the service life continues other 
fatigue-prone areas of the structure revealed in the fatigue test may need to be included 
in the analysis in the same way. 


Basic Assumptions 

The following basic assumptions are involved: 

(a) The service load S is independent of the failing load of the structure R. This 
assumption infers that any increase in flexibility of the structure as a fatigue crack 
extends does not affect its response to the applied loads. 

(b) There is no correlation between the residual strength of a cracked structure and 
its fatigue strength. This is supported by the fact that in a complex structure static 
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ultimate load failure usually occurs in a different area and by a different mechanism to 
fatigue failure. 

(c) The relative residual strength x = — tyr- of structures cracked to some crack 

length l has a characteristic probability distribution which applies for any value of l. 
For the monolithic structure considered in the section on page 289, the fracture mechan- 

[2 

ics relationship R(£) = K^— is assumed to apply. It can be shown from this that R(i) 

has the same probability distribution as the fracture toughness K and it is therefore 
the same for all crack lengths. 


(d) The distribution of fatigue life N^ z at a given crack length l has a log 
normal distribution. The log normal distribution is often used in making safe -life esti- 
mates and it has been supported as a good approximation by comprehensive surveys of 
fatigue test data (refs. 25 and 26). 


(e) At all points on the crack propagation curve of any structure, the fatigue life 


N 


Nj 


l,z bears a constant ratio to the median life at the same crack length --*a£ = z. 

Nj 

It can be shown that this follows from the properties of the log normal distribution of 
fatigue life assumed in assumption (d). 


(f) As structures fail by fatigue and are thus eliminated from the population there 
is no change in shape of the probability density functions of fatigue life z, relative 
strength x, or initial crack length l c . In practice some distortion of these functions 
will occur but for the small probabilities of failure considered it is regarded as a reason- 
able assumption. 


Input Data 

The following data are required: 

(a) The service load spectrum F s (s) which can usually be estimated from the 
considerable body of flight load data available. 

(b) The mean value of the ultimate failing load #x 0 which can usually be obtained 
from the results of static strength tests on the structure. 

(c) The probability distribution of relative strength x = — which must be esti- 

MrU) 

mated from representative data (as was done for the case of the high-strength steel 
structure by using data from high-tensile steel specimens) and the results from compo- 
nent testing during the design stage. 
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(d) The median crack propagation curve for the structure 7 n = g(fy); it is proposed 
to rely on the crack propagation curve obtained in the full-scale fatigue test of the 
structure. 


CONCLUDING REMARKS 


From a reliability analysis of the fatigue failure in aircraft structures under ser- 
vice loading conditions it is concluded that the current procedures for obtaining safety 
are not entirely adequate. These methods do not take full account of the probability of 
failure of the structure during the period in which it is being progressively weakened by 
the growing fatigue crack and they are therefore subject to inaccuracies which may be 
significant depending on the structural design parameters and the service conditions. 

It is also concluded that a reliability approach to the safety in fatigue of aircraft 
structures must be considered, using the results available from the structural tests and 
design analysis in conjunction with other representative data. 

Such an approach is quite feasible although an extensive body of data and a number 
of assumptions are involved which warrant some development and testing of the procedure 
in practice. 

However, the reliability approach has major potential advantages by enabling the 
safety of both safe-life and fail-safe structures to be determined on a quantitative basis, 
including the planning of efficient inspection procedures and allowance for the possibility 
of initial flaws in the material where appropriate. 
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APPENDIX 


TABULATION OF RISKS OF FAILURE AND 
PROBABILITY OF CRACK DETECTION 


For simplicity the risk functions in the body of the paper have been expressed in 
terms of the dimensionless variate z and they have been compared on a common basis 
in the various figures using the dimensionless variate Ng/5^. However, in this appendix 
they are expressed in a form more suitable for practical application, the risk of failure 
per hour using the relation: 

r(N s ) dN s = r(z) dz 

r< N s)-r(z)^ 

where N s is the service life in hours. 

If the risk of failure were to be required in units other than hours - such as load 
applications, for example - the dimensional variable N s (or for cracked structures H s ) 
would have to be expressed in those units. 

The footnotes for this appendix are included at the end of the appendix. 

STRUCTURES WITH NO INITIAL CRACKS 


No Inspection 


Risk with safe-life analysis .- Risk of failure per hour at N s hours, based on an 
estimated mean life Nj_, determined from a fatigue test as the life to some crack 
length L at which failure occurred, is given by 


r L(N S ) = 


n l 


PZ1 ^ 


I 


n s/ R L 


p z (z) dz 


(Al) 


where Nl is the estimated mean life to the crack length L expressed in hours. 

Risk of fatigue fracture a . - Risk of failure per hour by fatigue fracture at a life of 
N s hours can be given by 
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r F(^s) “ 


n 

F " \ 5 E 


1 « /“ S 

N- Pz '~ 


(A2) 


pOO 

\ . Pz(z) 

Jn s/ K F 


dz 


where Ntt is the median of the life in hours to complete collapse under the mean load. 


Risk of static fracture due to fatigue .- Risk of failure per hour by static fracture 
due to fatigue at a life of N s hours is given by 

r s <Ns > - cr o « F -.Me®-— * * 

where F s (s) denotes here the probability of exceeding a service load s per hour of 

operationb. 

Probability distribution of the failing load. - 


pVt life N s hours that the loads causing! 
Pr T static fracture due to fatigue ^ ji 0 x 0 J 


~n. Fs r° He 


p=n s r >x= 
!x=n s /np 4c=0 


L z 


^p(x)p(z) dx dz 


(A4) 


r s ( N s) 


where r s (Ns) is given by equation (A3), and F s (s) is taken as the probability of 
exceeding a service load s per hour of operation P. 

Periodic Inspection at • -> N I(m) Hours 

Risk of fatigue fracture with replacement 0 d .- Risk of failure per hour by fatigue 
fracture at a life of N s hours with structures repaired and returned to service after 
cracks have been detected is given by 

r F*( N s;*D,Nl(m)) = ± Pz(~^) ( N s > N I(m) 

_ a (Otherwise) 
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where N F is the median of the life in hours to complete collapse of structures under 
the mean load. 

Note. For continuous inspection the risk of fatigue fracture is zero in this case. 

Risk of static fracture due to fatigue with replacement c .- Risk of failure per hour 
by static fracture due to fatigue at a life of N g hours with structures repaired and 
returned to service after cracks have been detected is given by 

r I> S ;!D,N I(m) ) = J 2=ni( S m)/ . D J x=0 F s {*M 0 4[^]!p W p(z) dX * < A5 > 

where F g (s) denotes here the probability of exceeding a service load s per hour of 
operation* 5 . 

Note: For continuous inspection substitute N s for N I(m) and n s for n I(m) . 

Probability of detecting cracked structures with replacement 0 .- Probability of 
detection at the mth inspection with structures repaired and returned to service after 
cracks have been detected is given by 

r D*( N I(m)»*D> N I(m-l)) = ^ P( z ) d 2 - p r ^Fatigue fracture between and 

pH* 

Since it follows that where an inspection procedure is feasible, the probability of fatigue 
fracture is relatively insignificant compared to the probability of crack detection. 

Note: For continuous inspection the probability of detection per hour at any life 

N g hours is given by 


r D*(N 8 ;<D.N s , = J-p 2 (^ 

where Nj) is the median of the life in hours to the detectable crack length l jj. 
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Probability distribution of the failing load with replacement . - 


Pr 


(At life of N g hours following mth inspection, the loads ( 

^ causing static fracture due to fatigue = Mc^o J 

_ f-n s px 0/ 4(g||f} F s(xMo^(#]))pWpW 


dx dz 


(A6) 


where rj*(N s ;J D ,Ni( m )) is given by equation (A5), and F s (s) is taken as the proba- 
bility of exceeding a service load s per hour of operation* 5 . 

Note: For continuous inspection substitute N s for Nj( m ) and n s for ni( m ). 

STRUCTURES WITH INITIAL CRACKS (PROBABILITY DENSITY 
OF CRACK LENGTHS p(Z c )) 

No Inspection 

Risk of fatigue fracture a .- Risk of failure per hour by fatigue fracture at a service 
life of H s hours is given by 


, , N *'n c =1 n F “ N c V n F ‘ n cJ 

r F H s p(Z c )) = -T- 7 

r^c= r z==0 ° \ 

C \ p(z)p(nc)dz 

J n c =l J z=h s /n F -n c 


dfL 


dn r 


(A7) 


where N p is the median of the life in hours to complete collapse of initially uncracked 
structures Under the mean load, and is the median of the life in hours to produce a 
crack of length l c for initially uncracked structures. 

Risk of static fracture due to fatigue .- Risk of failure per hour by static fracture 
due to fatigue after a service life of H s hours is given by 


(H. I PM) - £7° C," C/(np-n- c ) 4““'# + "D P,Z| PW PW 112 <hda ‘ (A8) 


w here F s (s) denotes here the probability of exceeding a service load s per hour of 
operation* 5 . 


311 



Probability distribution of the failing load .- 


p r (At service life H s hours that the loads causing! 
^ static fracture due to fatigue ^ /i Q x 0 j 


i ‘ n c- n o r*z=«> 
h r =l ^z= 


=h s /(np-n c 


r x= x O/ /0 Ig 


\X 




x=0 


s|*M o 0^r + n~ c ])} p(x) p(z) p(ii c ) dx dz dn c 


I P(*c)) 


(A9) 


where r s (H s | p(Z c )) is given by equation (A8), and F s (s) is taken as the probability of 
exceeding a service load s per hour of operation b. 


Periodic Inspection at H I(1) ,H I ( 2 ),. . Hours 

Risk of fatigue fracture with replacement e d _ Risk of failure per hour by fatigue 

fracture after a service life of H s hours with structures repaired and returned to 
service after cracks have been detected is given by 


r F*( H s I Pgc)l*D> H I(m)) = 


>n c =(h s n D -h I ( m )n F y(h s -h I(m) ) 

l n c =i 



H a > ^l(m) ~ 


‘ 1 


® (otherwise) 

where ftp is the median of the life in hours to complete collapse of uncracked structures 
under the mean load, and N c is the median of the life in hours to produce a crack of 
length l Q for initially uncracked structures. 

Risk of static fracture due to fatigue with replacement 6 .- Risk of failure per hour 
by static fracture due to fatigue after a service life of H s hours with structures repaired 
and returned to service after cracks have been detected is given by 


*/ . r n c =n n ,-,z=°o 

r I ( H s I P(ic);iD.H I(m) = f °\ \ 

^n c =l ^x=0 ~z=h 


I(m)/( K D- 5 c) S 


^ + n c jj p(z) p(x) p(n c ) dz dx dn<. (A10) 


where F s (s) denotes here the probability of exceeding a service load s per hour of 

operation b. 


Note: For continuous inspection substitute H s for H I(m) and h s for h I(m) . 

Prob ability of detecting cracked structures with replacement 6 .- Probability of 
detecting cracked structures at the mth inspection with structures repaired and returned 
to service after cracks have been detected is given by 
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r n c =n 0 pz=hl( m )/(n D -n c ) f Fatigue fracture between! 

r D -(H. (m ||P(W; ! D,H„ m .l ,)-^, 1 L«„: i) /( SD -K c) ' >W ' ,Wd2 * t i "'<»•» “ d J 

J n c =l J z=hi( ra -i)/(nD- n c) 


Since it follows that when an inspection procedure is feasible the probability of fatigue 
fracture is relatively insignificant compared to the probability of crack detection. 

Note: For continuous inspection the probability of detection per hour at any ser- 

vice life H s is given by 


id’K | P(*c);*D,H s ) - “° fi ‘ » Mb d -nj P M 


hs 


dru 


Nd 


where Nd and are the median values of the lives in hours to produce crack lengths 
of I'Q and Z c , respectively, in initially uncracked structures. 

Probability distribution of the failing load with re placement.- 


(At a service life H s hours following the mth inspection ^ 
that the loads causing static fracture due to fatigue = ^ 0 x oJ 

f S c =R o r z= °° ^x=x 0 /4[g(— +n c ) f / ^ + JJ C p( x ) p( z ) p(n c ) dx dz dn c 

4^=1 J z=hi(m)/(n D - ff -'> Jx=0 ^ J — 


ri *(H s | p(i c );iD,Hi( m )) 


where rj^Hg | P(lc)>*D> H I(m)) is gi ven b y e( l uation ( A1 °)’ and F s( s ) 1S taken as the 
probability of exceeding a service load s per hour of operation b . 

a The term in the denominator of this expression is a normalising factor resulting from the truncation 
of the z distribution by the removal from the population of the structures that fail by fatigue fracture. 
However, it fs very close to unity for the probabilities of survival that are acceptable in practice. 

bln’ the body of the paper where r s (n s ) has been compared with other risk functions using the dimen- 
sionless variate Ng/fii, F s (s) has been taken as the probability of exceeding a service load s in a time 

interval Np , , , 

c When there is no replacement of those structures in the fleet in which cracks hav 
the corresponding probabilities and risk functions are obtained by dividing by the normalising factor 

p(z) dz. For continuous inspection, n^j is replaced by n s . 


•^ n I(m)/ fi D 1 


neglected here. 

e When there is no replacement of those structures in the fleet in which cracks have been detected 
the corresponding probabilities and risk functions are obtained by dividing by the factor 

r z -°° _ \ ^ ^ 


f R c=^0 f z °° , _ . p(z)pfnc) 

Jff c =l j z=h I(m) /(n D -n c ) P ' 

For continuous inspection hj( m ) is replaced by h s 


313 



REFERENCES 


1. Payne, A. O.: Determination of the Fatigue Resistance of Aircraft Wings by Full 

Scale Testing. Proceedings of Symposium on Full-Scale Fatigue Testing of Air- 
craft Structures, F. J. Plantema and J. Schijve, eds., Pergamon Press, 1961, 
pp. 76-132. 

2. Raithby, K. D.: A Comparison of Predicted and Achieved Fatigue Lives of Aircraft 

Structures. Proceedings of Symposium on Fatigue of Aircraft Structures, 

W. Barrois and E. L. Ripley, eds., Pergamon Press, 1963, pp. 249-261. 

3. Lyman, Taylor, ed.: Metals Handbook. Vol. 1.- Properties and Selection of Metals. 

8th ed., Amer. Soc. Metals, c.1961, pp. 87-94. 

4. Mayer, John P.- and Hamer, Harold A.: Applications of Power Spectral Analysis 

Methods To Maneuver Loads Obtained on Jet Fighter Airplanes During Service 
Operations. NASA TN D-902, 1961. 

5. Tolefson, H. B.: Summary of Derived Gust Velocities Obtained From Measurements 

Within Thunderstorms. NACA Rep. 1285, 1956. (Supersedes NACA TN 3538.) 

6. Mallinson, G. D.; and Graham, A. D.: A Multiple Integration Technique for the 

Numerical Evaluation of Probability Integrals. S.M. Rep., Aeronaut. Res. Lab. 
(Melbourne). (To be published) 

7. Shaw, R. R.: The Level of Safety Achieved by Periodic Inspection for Fatigue Cracks. 

J. Roy. Aeronaut. Soc., vol. 58, no. 526, Oct. 1954, pp. 720-723. 

8. Ferrari, R. M.; Milligan, I. S.; Rice, M. R.; and Weston, N. R.: Some Considerations 

Relating to the Safety of Fail-Safe Wing Structures. Proceedings of Symposium on 
Full-Scale Fatigue Testing of Aircraft Structures, F. J. Plantema and J. Schijve, 
eds., Pergamon Press, 1961, pp. 413-526. 

9. Lundberg, B. K. O.; and Eggwertz, S. (With appendix by L. vonSydow): A Statistical 

Method for Fail-Safe Design with Respect to Aircraft Fatigue. Proceedings of the 
Second Congress of the International Council of the Aeronautical Sciences, 
Pergamon Press, 1960. 

10. Eggwertz, S.; and Lindsjo, G.: Analysis of the Probability of Collapse of a Fail-Safe 

Aircraft Structure Consisting of Parallel Elements. FFA Rep. HU- 961, Aeronaut. 
Res. Inst, of Sweden, 1963. 

11. Heller, R. A.; and Heller, A. S.: A Probabilistic Approach to Cumulative Fatigue 

Damage in Redundant Structures. Rep. No. 17 (Contract No. NONR 266-91), Inst, 
for Study of Fatigue and Reliability, Columbia Univ., 1965. 


314 



12. Freudenthal, A. M.: Safety and Probability of Structural Failure. Proc. Amer. Soc. 

Civil Eng., vol. 80, no. 468, Aug. 1954, pp. 468-1 - 468-46. 

13. Freudenthal, A. M.; and Shinozuka, M.: Structural Safety Under Conditions of Ultimate 

Load Failure and Fatigue. WADD Tech. Rep. No. 61-177, U.S. Air Force, 1961. 

14. Freudenthal, A. M.; and Payne, A. O.: The Structural Reliability of Airframes. 

AFML-TR-64-401, U.S. Air Force, 1964. 

15. Pugsley, A.: The Safety of Structures. Edward Arnold Ltd. (London), 1966. 

16. Freudenthal, A. M.: Reliability Analysis Based on Time to the First Failure. 

Aircraft Fatigue - Design, Operational, and Economic Aspects, Programme of 
5th ICAF Symposium (Melbourne), J. Y. Mann and I. McMillan, eds., May 1967. 

17 Black, H. C.: Safety Reliability and Airworthiness. Proceedings of International 

Conference on Structural Safety and Reliability, Smithsonian Institute, Apr. 1969. 

18 Butler J. P.: Reliability Analysis and Fatigue Performance Estimation of Transport 

Type Aircraft. Proceedings of International Conference on Structural Safety and 
Reliability, Smithsonian Institute, Apr. 1969. 

19. Cornell, C. A.: Structural Safety Specifications Based on Second- Moment Reliability 

Analysis. Proceedings of IABSE Symposium on "Concepts of Safety and Methods of 

Design" (London), 1969. 

20. Ang A. H. S.: Critical Analysis of Reliability Principles Relative to Design. Paper 

presented at International Conference on Applications of Statistics and Probability 
to Soil and Structural Engineering (Hong Kong), Sept. 1971. 

21 Payne, A. O.; and Grandage, J. M.: A Probablistic Approach to Structural Design. 

Paper presented at International Conference on Applications of Statistics and 
Probability to Soil and Structural Engineering (Hong Kong), Sept. 1971. 

22 Cornell C A.- The Future of Probabilistic Design. Paper presented at Australian 

institution of Engineers Symposium on Reliability and Risk in Structural Design 
(Melbourne), 1971. 

23 Payne A. O.: Fully Probabilistic Design. Paper presented at Australian Institution 

of Engineers Symposium on Reliability and Risk in Structural Design (Melbourne), 


1971. 

24. Itagaki, H.; and Shinozuka, M.i Application of Monte Carlo Kchnique to Fatigue 

Failure Analysis under Random Loading. Technical Report No. 16 (NSF-GK3858 
and 24925), Columbia Univ., July 1971. (Also presented at the Symposium on 
Probabilistic Aspects of Fatigue, 74th Annual Meeting of ASTM (Atlantic City), 

1971.) 


315 


25. Impellizeri, L. F.: Development of a Scatter Factor Applicable to Aircraft Fatigue 

Life. Spec. Tech. Publ. No. 404, Amer. Soc. Testing Mater., 1966, pp. 136-156. 

26. Ford, D. G. ; Graff, D. G. ; and Payne, A. O.: Some Statistical Aspects of Fatigue Life 

Variation. Proceedings of Symposium on Fatigue of Aircraft Structures, 

W. Barrois and E. L. Ripley, eds., Pergamon Press, 1963, pp. 179-208. 


316 



TABLE I 

INSPECTION INTERVALS AND DETECTION RATES WITH INSPECTION FOR LIMITED RISK 

^ — — Structures with distribution 

'“1 Uncracked structures. Structures with initial cracks, ol initial cracks, _ 



o 
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depth of initial crack in any structure 
relative crack length (or depth), a/a F 
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Figure 3.- Probability of survival for spectrum I. 
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PROBABILITY OF SURVIVAL L (Tt) 
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Figure 4.- Probability of survival for spectrum II. 





Figure 5.- Calculation of risk of failure due to fatigue. 




Figure 6.* Risk of fatigue failure in initially cracked structures. 
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Figure 10.- Probability of survival of structures with variable initial crack depth t c for various inspection procedures 













Figure 13.- Survivorship functions for structures without initial cracks for various inspection procedu 
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Figure 15.- Probability distribution of failing load with spectrum I. Uncracked structures. 


